#Configure Auto Discovery

Before running backup jobs in AvePoint Cloud Backup for Microsoft 365, you must register the objects below that you want to protect in the Auto Discovery of AvePoint Online Services.

• Exchange Online mailboxes

• OneDrive accounts

• SharePoint Online site collections

• Microsoft 365 Groups/Microsoft Teams/Viva Engage community

• Project Online site collections

• Exchange Online public folders (For subscriptions with Multi-Geo enabled, the public folders can only be protected in the Central AOS Location)

• Microsoft 365 users

• Power BI workspaces

• Power Automate flows

• Power Apps (standard Canvas apps and component libraries)

To increase security for your Microsoft 365 tenant and avoid throttling, the new Auto discovery scan profile created after June 2023 release will use app profile authentication to scan and register the objects above.

The backup services in Cloud Backup for Microsoft 365 support the following app profiles:

*Note: If you do not have service apps configured, the Auto Discovery scan jobs and Cloud Backup jobs will use the default Microsoft 365 app or the custom Azure app with the required permissions.

|Backup Service|Service App (Modern Mode)|Default App (Classic Mode)|Custom App (Custom Mode)| |-|-|-|-| |SharePoint Online|Cloud Backup for Microsoft 365 (SharePoint Online)Cloud Backup for Microsoft 365 (All permissions)Cloud Backup Express|Microsoft 365 (All permissions)|Azure App| |OneDrive|Cloud Backup for Microsoft 365 (SharePoint Online)Cloud Backup for Microsoft 365 (All permissions)Cloud Backup Express|Microsoft 365 App (All permissions)|Azure App| |Project Online|Cloud Backup for Microsoft 365 (SharePoint Online)Cloud Backup for Microsoft 365 (All permissions)|Microsoft 365 App (All permissions)|Azure App| |Exchange Online|Cloud Backup for Microsoft 365 (Exchange Online)Cloud Backup for Microsoft 365 (All permissions)Cloud Backup Express|Microsoft 365 App (All permissions)|Azure App| |Public Folders|Cloud Backup for Microsoft 365 (Exchange Online)Cloud Backup for Microsoft 365 (All permissions)|Microsoft 365 App (All permissions)|Azure App| |Microsoft 365 Groups|Cloud Backup for Microsoft 365 (All permissions)Cloud Backup Express|Microsoft 365 App (All permissions)|Azure App| |Teams|Cloud Backup for Microsoft 365 (All permissions)Cloud Backup Express|Microsoft 365 App (All permissions)|Azure App| |Teams Chat|×|×|Azure App| |Viva Engage|Cloud Backup for Microsoft 365 (All permissions) and Viva Engage App|Microsoft 365 App (All permissions) and Viva Engage App|Custom Azure app with delegated permissions| |Power BI|Cloud Backup for Microsoft 365 delegated app|Delegated App|×| |Power Automate|Cloud Backup for Microsoft 365 delegated app|Delegated App|×| |Power Apps|Cloud Backup for Microsoft 365 delegated app|Delegated App|×|

#Authentications in Auto Discovery and Backup

The Auto Discovery in AOS and the backup services will now use the Cloud Backup for Microsoft 365 service apps (created through App management > Modern mode) first to scan and protect the objects in your tenants after June 2023 release. If you do not have service apps, we will use the default Microsoft 365 apps or custom Azure apps with the required permissions.

To protect Exchange Online mailboxes, SharePoint Online site collections, team sites and group sites with AvePoint Cloud Backup Express, you must configure a Cloud Backup Express service app for the Auto discovery and data protection.

*Note: If you have auto discovery scan profiles using the service account authentication or using app profile authentication to scan but with a service account as an additional method, the service account can still be used to protect the data that are unsupported in the app context (using app profile authentication). For the required permissions for the service account and account pool user, refer to Service Account Authentication. However, if you modify these scan profiles after June 2023 release, the service account authentication will be obsolete. Auto discovery scan jobs and the Cloud Backup jobs will look for the following apps for the operations:

• Cloud Backup for Microsoft 365 service apps (For permissions authorized by default, refer to .)

• Default Microsoft 365 app profile (For permissions authorized by default, refer to section in .)

• Custom app profile (For permissions that you must manually add, refer to the table in App Profile Authentication.)